k3s-vagrant

Usage

Configure your hosts file with:

10.11.0.101 s1.example.test
10.11.0.101 traefik-dashboard.example.test
10.11.0.101 kubernetes-dashboard.example.test

Install the base debian vagrant box.

Install the required vagrant plugins:

vagrant plugin install vagrant-hosts

Optionally, start the rgl/gitlab-vagrant environment at ../gitlab-vagrant. If you do this, this environment will have the gitlab-runner helm chart installed in the k8s cluster.

Launch the environment:

time vagrant up --no-destroy-on-error --no-tty --provider=libvirt # or --provider=virtualbox

Traefik Dashboard

Access the Traefik Dashboard at:

http://traefik-dashboard.example.test

Rancher Server

Access the Rancher Server at:

https://s1.example.test:6443

NB This is a proxy to the k8s API server (which is running in port 6444).

NB You must use the client certificate that is inside the tmp/admin.conf, tmp/*.pem, or /etc/rancher/k3s/k3s.yaml (inside the s1 machine) file.

Access the rancher server using the client certificate with httpie:

http \
    --verify tmp/default-ca-crt.pem \
    --cert tmp/default-crt.pem \
    --cert-key tmp/default-key.pem \
    https://s1.example.test:6443

Or with curl:

curl \
    --cacert tmp/default-ca-crt.pem \
    --cert tmp/default-crt.pem \
    --key tmp/default-key.pem \
    https://s1.example.test:6443

Kubernetes Dashboard

Launch the kubernetes API server proxy in background:

export KUBECONFIG=$PWD/tmp/admin.conf
kubectl proxy &

Then access the kubernetes dashboard at:

http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/

Then select Token and use the contents of tmp/admin-token.txt as the token.

Instead of using the kubectl proxy, you can also access the Kubernetes Dashboard at:

https://kubernetes-dashboard.example.test

K9s Dashboard

The K9s console UI dashboard is also installed in the server node. You can access it by running:

vagrant ssh s1
sudo su -l
k9s

Notes

k3s has a custom k8s authenticator module that does user authentication from /var/lib/rancher/k3s/server/cred/passwd.

system-check / k3s-vagrant